Concept Guide

netexthdr
netexthdr <alias-name>
eh <eh-type> deny | permit
Description
This command allows you to edit the packet filter options in the extension header (EH).
Syntax
Parameter Description Default
<alias-name>
Specify the EH alias name.
default
eh <eh-type>
Specify one of the following EH types:
l <0-255>: Matches the IPv6 next header type
l authentication: Matches the IPv6 authentication header
l dest-option: Matches the IPv6 destination-option header
l esp: Matches the IPv6 encapsulation security payload header
l fragment: Matches the IPv6 fragment header
l hop-by-hop: Matches the IPv6 hop-by-hop header
l mobility: Matches the IPv6 mobility header
l routing: Matches the IPv6 routing header
—
deny
Denies the IPv6 packets matching the specified extended header type.
—
permit
Permits the IPv6 packets matching the specified extended header type.
NOTE: By default, all the EH types are supported in the default EH.
—
Usage Guidelines
ArubaOS firewall is enhanced to process the IPv6 extension header (EH) to enable IPv6 packet filtering. You can
filter the incoming IPv6 packets based on the EH type. You can edit the packet filter options in the default EH,
using this command. By default, the default EH alias permits all EH types.
Example
The following command denies the IPv6 packets matching the specified extended header type in the default
EH:
(host) (config) #netexthdr default
(host) (config-exthdr) #eh authentication deny
Related Commands
(host) #show netexthdr <alias-name>
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide netexthdr | 634